CA XOsoft Control Service entry_point.aspx Remote Code Execution

Added: 06/07/2010 CVE: CVE-2010-1223 BID: 39238 OSVDB: 63611 Background CA XOsoft is storage and recovery management software that includes applications for combined business continuity and disaster recovery. The CA XOsoft product family includes CA XOsoft Replication, CA XOsoft High Availability...

CA XOsoft Control Service entry_point.aspx Remote Code Execution

Added: 06/07/2010 CVE: CVE-2010-1223 BID: 39238 OSVDB: 63611 Background CA XOsoft is storage and recovery management software that includes applications for combined business continuity and disaster recovery. The CA XOsoft product family includes CA XOsoft Replication, CA XOsoft High Availability...

DSquare Exploit Pack: D2SEC_CAXOSOFT

Name| d2seccaxosoft ---|--- CVE| CVE-2010-1223 Exploit Pack| D2ExploitPack Description| CA XOsoft Control Service entrypoint.aspx Remote Stack Overflow Vulnerability Notes|...

CVE-2010-1223

CA XOsoft r12.0/r12.5 are affected by a stack/ buffer overflow in the Control Service, triggered by overly long data to /entry_point.aspx or malformed requests to ws_man/xosoapapi.asmx. The root cause is insufficient boundary checking when processing HTTP/SOAP inputs, enabling a remote attacker t...